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Abstract 

It has long been known that any Boolean function that depends on n input variables has both degree 
and exact quantum query complexity of 0(log n), and that this bound is achieved for some functions. In 
this paper we study the case of approximate degree and bounded-error quantum query complexity. We 
show that for these measures the correct lower bound is 51 (log nj log log n), and we exhibit quantum 
algorithms for two functions where this bound is achieved. 

1 Introduction 

1.1 Degree of Boolean functions 

The relations between Boolean functions and their representation as polynomials over various fields have 
long been studied and applied in areas like circuit complexity HBei931 , decision tree complexity [NS94, 
BW02], communication complexity MBWOU IShe081 . and many others. In a seminal paper, Nisan and 
Szegedy [NS94] made a systematic study of the representation and approximation of Boolean functions 
by real polynomials, focusing in particular on the degree of such polynomials. To state their and then our 
results, let us introduce some notation. 

• Every function / : {0, l} n — > R has a unique representation as an ra-variate multilinear polynomial 
over the reals, i.e., there exist real coefficients as such that / = Ylsc[n] a s ILeS 1 Xi - ^ ts degree is the 
number of variables in a largest monomial: deg(/) := max{|5'| : as ^ 0}. 

• We say g e-approximates f if \ f(x) — g(x)\ < e for all x G {0, l} n . The approximate degree of / is 
deg(/) := min{deg(g) : g 1/3-approximates /}. 

• For x G {0, l} n and i G [n], x l is the input obtained from x by flipping the bit x%. A variable x% is 
called sensitive or influential on x (for /) if f(x) ^ f{x % ). In this case we also say / depends on Xj. 
The influence of Xj (on Boolean function /) is the fraction of inputs x G {0, l} n where i is influential: 

lnf i (f):=PT x [f(x)^f(x% 

• The sensitivity s(f,x) of / at input x is the number of variables that are influential on x, and the 
sensitivity of / is s(f) := max xg { s(f, x). 
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One of the main results of [NS94] is that every function / : {0, l} n — > {0, 1} that depends on all n variables 
has degree deg(/) > logn — O(loglogn) (our logarithms are to base 2). Their proof goes as follows. 
On the one hand, the function fi(x) := f(x) — f(x l ) is a polynomial of degree at most deg(/) that is 
not identically equal to 0. Hence by a version of the Schwartz -Zippel lemma, fa is nonzero on at least a 
2~ dc g(/) -fraction of the Boolean cube. Since fi(x) ^ iff i is sensitive on x, this shows 

Infj(/) > 2~ deg tf) for every influential x { . (1) 

On the other hand, with a bit of Fourier analysis (see Section 12.11 ) one can show 

n 

i=i 

and hence 

there is an influential xi with Infj(/) < deg(/)/n. (2) 

Combining (H)) and (|2]) implies deg(/) > logn — O(loglogn). As Nisan and Szegedy observe, this lower 
bound is tight up to the 0(log log n) term for the address function: let k be some power of 2, n = k + log k, 
and view the last log k bits of the n-bit input as an address in the first k bits. Define f(x) as the value of the 
addressed variable. This function depends on all n variables and has degree log k + 1 < log n + 1, because 
we can write it as a sum over all log fc-bit addresses, multiplied by the addressed variable. 

1.2 Approximate degree of Boolean functions 

Our focus in this paper is on what happens if instead of considering representation by polynomials we 
consider approximation by polynomials. While Nisan and Szegedy studied some properties of approximate 
degree in their paper, they did not state a general lower bound for all functions depending on n variables. 
Can we modify their proof to work for approximating polynomials? While © still holds if we replace 
the right-hand side by approximate degree, (Q3 becomes much weaker. Since it is known that Infj(/) > 
2- 2s ^ +1 HSim83l p. 443] and s(f) = 0(deg(/) 2 ) llNS94l . we have 

Infi(/) > 2~° (deg(/)2) for every influential Xi . (3) 

This lower bound on Infj(/) is in fact optimal. For example for the n-bit OR-function each variable has 
influence (n + l)/2 n and the approximate degree is Q{y/n). Hence modifying Nisan and Szegedy's exact- 
degree proof will only give an Q(y/logn) bound on approximate degree. Another way to prove that same 
bound is to use the facts that s(f) = 0(deg(/) 2 ) and s(f) = r2(logn) if / depends on n bits [Sim83]. 

In Section [2] we improve this bound to f2(log n/ log log n). The proof idea is the following. Suppose 
P is a degree-<i polynomial that approximates /. First, by a bit of Fourier analysis we show that there is a 
variable Xi such that the function Piix) := P(x) — P{x l ) (which has degree < d and expectation 0) has 
low variance. We then use a concentration result for low-degree polynomials to show that Pi is close to 
its expectation for almost all of the inputs. On the other hand, since xi has nonzero influence, © implies 
that \Pi\ must be close to 1 (and hence far from its expectation) on at least a 2~°( rf2 )-fraction of all inputs. 
Combining these things then yields d = Sl(log n l l°g l°g n )- 
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1.3 Relation with quantum query complexity 

One of the main reasons that the degree and approximate degree of a Boolean function are interesting 
measures, is their relation to the quantum query complexity of that function. We define Qe{J) and Qz(f) 
as the minimal query complexity of exact (errorless) and 1/3-error quantum algorithms for computing /, 
respectively, referring to [BW02 1 for precise definitions. 

Beals et al. ||BBC + Qll established the following lower bounds on quantum query complexity in terms 
of degrees: 

Qe(J) > deg(/)/2 and Q 2 (f) > deg(/)/2. 

They also proved that classical deterministic query complexity is at most 0(deg(/) 6 ), improving an earlier 
8th-power result of [NS94 |, so this lower bound is never more than a polynomial off for total Boolean 
functions. While the polynomial method sometimes gives bounds that are polynomially weaker than the true 
complexity [Amb06 ], still many tight quantum lower bounds are based on this method ITAS041IKSW071 . 

Our new lower bound on approximate degree implies that Q2(f) = 0(logn/loglogn) for all total 
Boolean functions that depend on n variables!^ In Section [3] we construct two functions that meet this 
bound, showing that Q2H) can be 0(logn/loglogn) for a total function that depends on n bits. Since 
Q2H) > deg(/)/2, we immediately also get that deg(/) can be 0(log n/ log log n). Interestingly, the only 
way we know to construct / with asymptotically minimal deg(/) is through such quantum algorithms — this 
fits into the growing sequence of classical results proven by quantum means IIDW111 . 

The idea behind our construction is to modify the address function (which achieves the smallest degree 
in the exact case). Let n = k + m. We use the last m bits of the input to build a quantum addressing scheme 
that specifies an address in the first k bits. The value of the function is then defined to be the value of the 
addressed bit. The following requirements need to be met by the addressing scheme: 

• There is a quantum algorithm to compute the index i addressed by y G {0, l}" 1 , using d queries to y; 

• For every index i G {1, . . . , k}, there is a string y E {0, l} m that addresses i (so that the function 
depends on all of the first k bits); 

• Every string y G {0, l} m addresses one of 1, . . . , k (so the resulting function on k + m bits is total); 

In Section [3] we give two constructions of addressing schemes that address k = d 6 W bits using d quan- 
tum queries. Each gives a total Boolean function on n > d e ( d > bits that is computable with d + 1 = 
0(log nj log loen) quantum queries: d queries for computing the address i and 1 query to retrieve the 
addressed bit a^o 

To summarize, all total Boolean functions that depend on n variables have approximate degree and 
bounded-error quantum query complexity at least il(log n/ log log n), and that lower bound is tight for 
some functions. 

'in contrast, the classical bounded-error query complexity is lower bounded by sensitivity |NS94| and hence always SI (log n). 

2 It is interesting to contrast this with "quantum oracle interrogation" [Dam98|. If we just allowed any m-bit address then this 
address could be recovered using roughly ra/2 quantum queries [Dam98|, but not less |ABSW13|. In other words, d quantum 
queries could recover one of roughly 2 2d possible addresses. In the addressing schemes we consider here, where different m-bit 
strings can point to the same address, d quantum queries can recover one of d e ' d ' possible addresses. 
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2 Approximate degree is Q(log n/ log log n) for all total / 



2.1 Tools from Fourier analysis 

We use the framework of Fourier analysis on the Boolean cube. We will just introduce what we need here, 
referring to HO'D08I |Wol08 ] for more details and references . In this section it will be convenient to denote 
bits as +1 and —1, so a Boolean function will now be / : {±l} n — > {±1}. Unless mentioned otherwise, 
expectations and probabilities below are taken over a uniformly random x E {±1}". 
Define the inner product between functions /, g : {±l} n — > E as 

</>3> = ^ E f^)9(x)=E[f.g}. 

For SC [n], the function xs is the product (parity) of the variables indexed in S. These functions form an 
orthonormal basis for the space of all real-valued functions on the Boolean cube. The Fourier coefficients 
of / are f(S) = (f, xs), an d we can write / in its Fourier decomposition 

/ = E f Os- 
sein] 

The degree deg(f) of / is maxUS 1 ] : f(S) / 0}. The expectation or average of / is E[/] = /(0), and its 
variance is Var[/] = E[/ 2 ] — E[/] 2 = J2s^<D f{S) 2 - The p-norm of / is defined as 

||/|| p = E[|/H 1 /p. 

This is monotone non-decreasing in p. For p = 2, Parseval's identity says 

n/[ii!=£/W. 

s 

For low-degree /, the famous Bonami-Beckner hypercontractive inequality implies that higher norms cannot 
be much bigger than the 2-normJl 

Theorem 1. Let f be a multilinear n-variate polynomial. Ifq>2, then 

\\f\\ q <(q-l) desif)/2 \\f\\ 2 . 

The main tool we use is the following concentration result for degree-ci polynomials (the degree- 1 
case is essentially the familiar Chernoff bound). Its derivation from Theorem [T] is folklore, see for ex- 
ample [DFKO07, Section 2.2] or IO'D08[ Theorem 5.4]. For completeness we include the proof below. 

Theorem 2. Let F be a multilinear n-variate polynomial of degree at most d, with expectation and 
variance a = \\F\\l. For all t > (2e) d/2 it holds that 

Pr[\F\ > to-} < exp (-(d/2e) ■ t 2/d ^j . 

3 See for example [O'D07 Lecture 16, Corollary 1.3] or [W0IO8 , after Theorem 4.1] for a proof, and [Jan97. Chapter 5] for more 
background on hypercontractivity. 
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Proof. Theorem Q] implies 

E[\F\ q ] = \\F\\\ <{q- l) dq/2 \\F\\ q 2 = (q- l) dq ' 2 a q . 
Using Markov's inequality gives 

E[|P| 9 1 ( a _ 1^9/2^ p dq/2 
Pr[|F| > ta] = Pr[|P|<* > (ta)"] < < {q L) < 1 . 

Choosing q = t 2 / d /e gives the theorem (note that our assumption on t implies q > 2). □ 

2.2 The lower bound proof 

Here we prove our main lower bound. 

Theorem 3. Every Boolean function f that depends on n input bits has 

deg(/) = 0, (log nj log log n). 

Proof. Let P : W l — > [—1, 1] be a 1/3-approximating polynomial for / (the assumption that the range is 
[—1, 1] rather than [—4/3, 4/3] is for convenience and does not change anything significant.) Our goal is to 
show that d := deg(P) is Q (log n/ log log n). If d > log n/ log log n then we are already done, so assume 
d < log nj log log n. 

Define ft by = (f(x) - f(x i ))/2 and similarly define P by P 4 (x) = (P(x) - P{x i ))/2. Note 
that both /j and Pj have expectation 0. We have fi(x) G {±1} if i is sensitive for x, and = if i 

is not sensitive for x. Similarly for Pj, with an error of up to 1/3. Note that P{(S) = P(S) if i G 5 and 
P(5) =0if Then 

n n n 

E 11*112 = E E ^(^) 2 = E E p (^) 2 = E \ s \ p w 2 * d Y, p ^ 2 = d w p wl * d - 

i=l i=l S i=l S3i S S 

Hence there exists an i G [n] for which 

IIPII2 — d / n - 

Assume i = 1 for convenience. Because every variable (including x\) is influential, Eq. © implies 

Infi(/) > 2~°^\ 

Define a 2 = Var[Pi] = || jRl Ha < d/n. Set t = l/2a > y/n/Ad. Then t > (2e) d/2 for sufficiently large n, 
because we assumed d < log n/ log log n. Now use Theorem |2]to get 

Inf 1 (/)=Pr[/ 1 (x)G{±l}] 
= Pr[|Pi(x)| > 1/2] 
= Pr[|Pi(x)| > ta] 

<exp(-(d/2e) -t 2/d ) 
<exp(-(d/2e) • (n/4d) 1/d ) . 
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Combining the upper and lower bounds on Infi(/) gives 




Taking logarithms of left and right-hand side and negating gives 

0{d 2 ) > (d/2e){n/4d) 1/d . 
Dividing by d and using our assumption that d < log nj log log n implies, for sufficiently large n: 

logn > (n/4d) 1/d . 

Taking logarithms once more we get 



Note that the constant factor in the is essentially 1 for any constant approximation error. The 
SI (log nj log log n) bound remains valid even for quite large errors: the same proof shows that for every 
constant 7 < 1/2, every polynomial P for which sgn(P(x)) = f(x) and |-P(:e)| £ [l/n 7 ,l] for all 
x E {±1}™, has degree Q(logn/ log logn). This lower bound no longer holds if 7 = 1; for example for 
odd n, the degree-1 polynomial Yli=i Xi/nhas the same sign as the majority function, and |P(x)| G [1/n, 1] 
everywhere. 

3 Functions with quantum query complexity O (log nj log log n) 

In this section we exhibit two n-bit Boolean functions whose bounded-error quantum query complexity (and 
hence approximate degree) is O (log nj log log n). 

Theorem 4. There is a Boolean function f : {0, l} n — > {0, 1} that depends on all n variables and has 



Proof. Let us call a function a(x\, . . . , x m ) of m variables x\, . . . , x m £ {0, 1} a k-addressing scheme if 
a(x\, . . . , x m ) G [k] and, for every i £ [k], there exist x\, . . . , x m £ {0, 1} such that a{x\, . . . , x m ) = i- 

Lemma 1. For every t > 0, there exists a k-addressing scheme a(x\, . . . ,x m ) with k = t l that can be 
computed with error probability < 1/3 using 0{t) quantum queries. 

Proof. In Sections [3TT1 and [3T2l we give two constructions of addressing schemes achieving this bound. □ 

Set m = t 2 , k = t l , and n = m + k. Without loss of generality, we assume all variables x\, . . . , x m in 
the /c-addressing scheme a(x\, . . . , x m ) from Lemma[T]are significant. (Otherwise remove the insignificant 
variables and decrease m.) Define the following n-bit Boolean function: 



Then / can be computed with 0(t) + 1 queries and the number of variables is n > k = i*. Hence, 



d > log(n/4(f)/ log logn = logn/ log logn — 0(1), 



which proves the theorem. 



□ 




f\X>Xi • • • > x n 



a(x k+1 ,x k+2 ,...,x k+m )- 



log n t log t 



(l + o(l))*- 



log log n log t + log log t 



□ 
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3.1 Addressing scheme: 1st construction 

Define the scheme in the following way. We select k = £* words u;W of m bits each, such that any two 
distinct words u/W and u/w) have Hamming distance in the interval I = — ci^/tlogi, y + ci^i log i J . 

One can for example show the existence of such strings using a standard application of the probabilistic 
method, as follows. Select the iv® randomly from {0, l} m . For distinct i and j, the expected Hamming 
distance between it;W and iow') equals m/2. By a Chernoff bound, the probability that this Hamming 
distance is outside of the interval I is 2~ n ( c2 ' 3 lo g(*)/ m ) = 2~ n ( c2 ' lo s*). If we choose c a sufficiently large 
constant then this probability is 0(1/(2)). Since there are L) distinct i, j-pairs, the union bound implies 
that with probability 1 — o(l), all pairs of words 10 W and have Hamming distance in the interval I. 

For input x € {0, l} m , define a(x) := i if x = and a(x) := 1 if x does not equal any of 

. . . , w (k \ We select t' = 0(t) so that 

V Vt ) 

Let 

.7=1 

Let be the state \ifj) defined above if x = If i ^ j, we have 

(^1^fV(^l^)) t '<(^^) t '<^. 

The following lemma is quantum computing folklore. For the sake of completeness we include a proof 
in Appendix lAl 

Lemma 2. Let k > 1 0M<i \((>i), ■ ■ ■ , \ 4>k) be states such that |(<fo|<£i)| < 1/k 2 whenever i ^ j. Then there 
is a measurement that, given \4>i), produces outcome i with probability at least 2/3. 

We will apply this lemma to the k states \<fii) = Our 0(i)-query quantum algorithm is as follows: 

1. Use if = 0(t) queries to generate |^>)®* . 

2. Apply the measurement of Lemma[2] 

3. If the measurement gives some i ^ 1, then use Graver's search algorithm [Gro96. BHMT02] (with 
error probability < 1/3) to search for j G [m] such that Xj 7^ Wj . 

4. If no such j is found, then output i. Else output 1. 

The number of queries is 0(t) to generate |^>)®*' and 0{y/m) = 0(t) for Graver search, so 0(t) in total. 

If the input x equals some then the measurement of Lemma |2] will produce the correct i with 
probability at least 2/3 and Graver search will not find j s.t. Xj / Wj. Hence, the whole algorithm will 
output i with probability at least 2/3. If the input x is not equal to any then the measurement will 

produce some i but Graver search will find j s.t. xj / w f \ with probability at least 2/3. As a result, the 
algorithm will output the correct answer 1 with probability at least 2/3 in this case. 



7 



3.2 Addressing scheme: 2nd construction 



Our second addressing scheme is based on the Bernstein- Vazirani algorithm HBV971 . For a string z 6 
{0, let h(z) be its 2 s -bit Hadamard codeword: h(z)j = z ■ j mod 2, where j ranges over all indices 
G {0, 1} S , and z • j denotes the inner product of the two s-bit strings z and j. The Bernstein- Vazirani 
algorithm recovers z with probability 1 using only one quantum query if its 2 s -bit input is of the form h(z). 
For our addressing scheme, we set s = log log k — log log log k and t = (log k)/s (assume for simplicity 
these numbers are integers). Note that k = The m-bit input x to the addressing scheme consists 

of t blocks . . . , of 2 s bits each, so m = t2 s = 0(t 2 ). Define the addressing scheme as follows: 

If x is of the form h(z^) . . . h(zfi>) then set a(x) := z^ 1 ' . . . zW. Otherwise set a(x) := logfc . 

Note that the value of a(x) is a log fc-bit string, and that the function is surjective. Hence, identifying 
{0, l} lo s fc with [A;], the function a addresses a space of k bits. 

The following algorithm computes a(x) with 0(t) quantum queries: 

1. Use the Bernstein- Vazirani algorithm t times, once on each xv\ computing z^ l \ . . . , z^ G {0, 

2. Use Grover HGro96llBH"MT021 to check if x = x^ . . . equals the m-bit string h(z^ ) . . . h(z^). 

3. If yes, output a{x) = . . . z^\ Else output logfc . 

The query complexity is t queries for the first step and 0(y/m) = 0(t) for the second. 

If the input x is the concatenation of t Hadamard codewords h(z^), . . . , h(z^), then the first step will 
identify the correct z^\ . . . , with probability 1, and the second step will not find any discrepancy. On 
the other hand, if the input is not the concatenation of t Hadamard codewords then the two strings compared 
in step 2 are not equal, and Grover search will find a discrepancy with probability at least 2/3, in which case 
the algorithm outputs the correct value logfc . 

4 Conclusion 

We gave an optimal answer to the question how low approximate degree and bounded-error quantum query 
complexity can be for total Boolean functions depending on n bits. We proved a general lower bound of 
SI (log nj log log n), and exhibited two functions where this bound is achieved. The latter upper bounds are 
obtained by variations of the address function that are suitable for quantum algorithms. 

Acknowledgements. Eq. © was observed in email discussion between RdW and Scott Aaronson in 2008. 
We thank Arturs Backurs, Oded Regev, Mario Szegedy, and the anonymous CCC referees for useful com- 
ments and references. 
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A Proof of Lemma |2] 

The lemma is obvious for k = 1, so we can assume k > 2. Let Hilbert space % be the span of the 
states \<fii) , . . . , \ cf)k) , and define A = J2i=i as an operator on this space. We want to show that 

A is close to the identity operator on %. We first show that A\4>j) is close to \<j>j) for all j S [k]. Define 
\Sj) = A\<j)j) - We have 



E \<t>i)^Ui 

ie[fc]\{j} 



< E m\4> 3 )\< 



im\{j} 



k-i 



Now we show A\v) is close to \v) for an arbitrary unit vector \v) = Y^j=i a j\ ( Pj) i n ^- Define a 
Ylj=i \ a j\ 2 - We have 



i = {v \ v) = j2 

i,3=l 

Also, using the Cauchy-Schwarz inequality, 



i+3 V V ^ V V ij 

This implies 1 > a — a/k and hence a < 1/(1 — 1/k) = k/(k — 1). We have 

A \v) =^a j A\4> j ) =E«id^) + l*7» = l"> +E«il*i>- 
i=i i=i i=i 

This implies, again using Cauchy-Schwarz, 

k 



\\A\v)-\v)\\<Y,<*j¥i\\< 



\ EK' \ ^ 

\ 3=1 \ 3=1 



V||<y 2 < 1 k ./ /c ^" 1 ) 



k-1 



A; 1 



fc- 1 1 



Hence A < §1. 



Our measurement will consist of the operators Ei = %\(f>i) (<j>i\ for all i 6 [/c], and Eq = I — Yli=i 
By the previous discussion E = I — ^A > 0, so this is a well-defined measurement (more precisely, a 
POVM). Given state \4>i), i G [k], the probability that our measurement produces the correct outcome i 
equals Tr(£;|^) (c/>;|) = 2/3. 
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